Legal
Privacy Policy
COD Flex creates editable Cash-on-Delivery orders and generates courier AWBs, and keeps the COD total it displays in step when you edit the order. To do that it processes the buyer’s order and delivery details. It never sees or stores card or bank data.
Last updated: July 19, 2026
PCD LEVEL 1
Summary
COD Flex is a Shopify app for Cash-on-Delivery selling in Romania and Central/Eastern Europe. Buyers pay with Shopify’s own native Cash-on-Delivery method at checkout; COD Flex never creates orders and never touches checkout. It reads each COD order to score how likely it is to be refused, tags the risky ones, refreshes the COD total it displays when you edit the order, and can generate local-courier shipping labels. Because it reads orders and prints shipping labels, it processes the buyer’s name, phone, email and delivery address — which makes it a Protected Customer Data Level 1 app.
What we access and why
Orders
We read and write orders (read_orders, write_orders) to create the COD order from your form. When you later edit that order in Shopify, we refresh our own copy of the COD total so the amount shown on the COD orders page stays in step.
Fulfillment & shipping
We read and write fulfillments and locations (read_fulfillments, write_fulfillments, write_merchant_managed_fulfillment_orders, read_locations) and shipping (read_shipping, write_shipping) to generate courier labels, track delivery, and use your real Shopify shipping rates.
Hide COD at checkout
We use a Payment Customization Function (write_payment_customizations) to hide Cash-on-Delivery at checkout for the postcodes/counties you flag or for customers you tag as refusers.
Products
We read products (read_products) to resolve the variant the order refers to when scoring it and printing the courier label.
What we store in our own database
For each COD order we store the Shopify order ID and name, the amounts (COD total, currency), the chosen courier, parcel count, AWB, tracking number and delivery status, the delivery method and locker (if any), and an address-validation status — plus your shop domain, your app settings, and billing status. To prevent repeat refusals we keep a hashed contact reference and refusal counts, never the raw phone or email.
The buyer’s name, phone, email and address are passed to Shopify (to create the order) and to your chosen courier (to print the AWB). We never store card or bank details — Cash-on-Delivery collects cash at the door and no card is taken.
No AI
COD Flex is deterministic. The COD-total refresh, hide-COD rules, address matching and tracking are rules — not predictions. Nothing from your store is sent to an AI model.
Third parties
- Shopify — hosts your store, places the order through its own native checkout, and authorises the app’s Admin API access to read and tag that order.
- Your courier — Sameday, DPD, FAN Courier, Cargus or Packeta, called with your own courier account credentials, only to generate and track the AWB for a COD order. We do not send your data to any courier you have not configured.
- Our hosting — a dedicated server in the European Union, served over HTTPS/TLS with restricted access.
There is no AI provider and no analytics vendor. We never sell or share your data, and we never use it for advertising or model training of our own.
Retention & security
- EU hosting, TLS in transit: COD Flex is hosted on a dedicated server in the European Union; all traffic is served over HTTPS/TLS, and access is restricted. Backups are encrypted; every access to a buyer’s protected fields is logged. See our Security & incident-response policy.
- Purpose-limited: we keep only the order-linked fields listed above, for as long as you use the app.
- Deleted on uninstall: on app uninstall and on a Shopify shop-redaction request, your data is removed. We honour the mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact).
Your rights (GDPR / CCPA)
You may request access to, correction of, export of, or deletion of the data we hold. A Shopify customers/data_request returns the stored COD order rows for that customer; customers/redact deletes those stored COD order rows and any refusal risk profile for that customer; and shop/redact deletes all of your shop’s data, including web-vitals and sessions. Contact gheorghe.beschea@overheat.agency.